Privacy Policy
Last updated: 24 October 2026
This policy describes how the personal data of users of the "Who am I?" website (whoami.syntropic-studio.fr) is processed, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
The data controller is Maxence CORGIER, sole trader (entrepreneur individuel) operating under the trade name SYNTROPIC, 13 rue Transversale, 69009 Lyon, France. Contact: contact@syntropic-studio.fr.
2. Data collected, purposes and legal bases
At the end of the test (before any purchase). The following are recorded: your answers to the questionnaire, the calculated scores, the resulting archetype, the language and the date. This data is recorded without identifying you (without your email address). Purpose: to generate your result and allow you, where applicable, to unlock the Report. Legal basis: legitimate interest in providing the requested service.
The email address you enter on the Site to display your archetype is not transmitted to our servers at that stage; it is only recorded at the time of purchase.
When purchasing the personality report. The following are processed: your email address, payment information (processed by Stripe; we do not receive your card number), the status and date of payment, the payment session identifier, the timestamp and text of your waiver of the right of withdrawal, and the date the delivery email was sent. Purposes: to process the order, deliver the Report, provide customer service, keep proof of the transaction and of the waiver, and comply with our accounting obligations. Legal bases: performance of the contract; compliance with a legal obligation (accounting); legitimate interest (proof, fraud prevention).
Audience measurement of the orientation pages. Each visit to the orientation report page and to the orientation questionnaire is counted anonymously: only the date, the page and the source of the visit are recorded, without IP address, cookie or identifier. Purpose: to measure interest in the orientation report. Legal basis: legitimate interest.
Orientation questionnaire. When you complete the orientation questionnaire, the following are recorded: your answers, the calculated scores, the suggested occupations, the date, where applicable the source of your visit, and whether or not you clicked on the full report. This data is recorded on a non-identifying basis: no name, email address, IP address or identifier, and it is not linked to any purchase of the orientation report (see below). Purposes: to calculate and display your result, to measure interest in the full report, and to improve the ranking of occupations using overall statistics on all answers. Legal basis: legitimate interest in providing and improving the requested service.
Purchase of the orientation report. When you proceed to payment for the orientation report, a copy of your answers to the orientation questionnaire is recorded in a profile specific to your purchase, together with a personal access link (a random string of characters), where applicable the source of your visit, and the timestamp and text of your waiver of the right of withdrawal. Until payment is confirmed, this profile contains no email address. Once payment is confirmed, the following are added: your email address (entered on Stripe's payment page), the payment status and date, the payment session identifier, the date the delivery email was sent and, as you use the report, your answers to the refinement questionnaire, your settings (for example excluding occupations outside your constraints) and the date the link was last sent again. This data is then linked to your email address. If the purchase is made for a child, the linked address is the one entered during payment, for example the parent's. Purposes: to deliver the orientation report, to let you refine the ranking and resume later, to send the access link again on request, to provide customer service, to keep proof of the transaction and of the waiver, and to comply with our accounting obligations. Legal bases: performance of the contract; compliance with a legal obligation (accounting); legitimate interest (proof, fraud prevention).
Sending the access link again. If you ask to receive the link to your orientation report again, the email address entered is used only to look for a paid report under that address and, if one exists, to send the link to it. It is not recorded if no paid report matches it. Legal basis: performance of the contract.
3. Recipients and processors
Your data is neither sold nor rented. It is accessible to the publisher and to its technical processors, acting on its instructions:
- Supabase: database hosting (European Union, Ireland);
- Stripe: payment processing;
- Resend: sending the report delivery emails and the orientation report access link when requested again;
- Netlify: hosting of the Site.
4. Transfers outside the European Union
The database is hosted in the European Union. Some processors (Stripe, Resend, Netlify) may process data in the United States. These transfers are governed by appropriate safeguards, such as the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.
5. Retention periods
Test results not linked to a purchase (answers, scores, archetype, language, date). These records contain no data that identifies you: no name, no email address, no account. They are kept for as long as the Site is operated, in order to run the service and to measure its use in aggregate form. Without an identifier, we cannot retrieve such a result from your identity alone; if you have kept the link to your result, you may request its deletion at contact@syntropic-studio.fr.
Data linked to a purchase (email address, payment status and date, payment session identifier, timestamp and text of your waiver of the right of withdrawal, delivery email date). This data is kept for 10 years from the purchase, a period required by Article L123-22 of the French Commercial Code for accounting records, and by the need to retain proof of the transaction and of the waiver. During that period, your Report remains accessible from the link sent to you by email.
Orientation questionnaire answers (answers, scores, suggested occupations, date, source, click on the full report). Like test results, these records do not identify you. They are kept for as long as the Site is operated, to run the service and calculate overall statistics.
Purchased orientation report profile. Payment and waiver data (email address, payment status and date, payment session identifier, timestamp and text of the waiver, delivery email date) are kept for 10 years from the purchase, for the same reasons as above. Your answers (questionnaire and refinement), your settings and your access link are kept for 3 years from your last access to the report, then deleted: the report then ceases to be accessible. You may request their deletion at any time at contact@syntropic-studio.fr: the report then ceases to be accessible, and only the data required by our accounting obligations is retained.
Unpaid orientation report profile (payment abandoned or not confirmed). It contains no email address or any other element that identifies you. It is kept like the orientation questionnaire answers, which allows you to resume payment through the return link.
Deletion. Deletions and anonymizations are carried out following a request sent to contact@syntropic-studio.fr, within the one-month period stated in Article 8. You may at any time request the erasure of data that is not required to meet our accounting obligations, in particular your email address; where applicable, the only data retained until the end of the 10-year period is the data required on that basis.
6. Cookies and trackers
The Site does not use analytics, profiling or advertising cookies. Only cookies strictly necessary for the operation of the Site may be used; they do not require your consent. During payment, you are redirected to Stripe, which places its own cookies necessary for security and fraud prevention, governed by Stripe's privacy policy.
7. Security
Access to the database is restricted to the application server by means of a secret key; the database is configured to prohibit any direct public access. Payment information is processed by Stripe over encrypted connections.
8. Your rights
In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to define directives on the fate of your data after your death. To exercise them, write to contact@syntropic-studio.fr. A response will be provided within one month.
You may also lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
9. Minors
The Site is accessible from the age of 15. Data collected from a minor benefits from a reinforced right to erasure: any person may request the deletion of data concerning them that was collected while they were a minor. Purchase of a report requires being of legal age or having the authorization of the holder of parental authority. The orientation questionnaire is aimed in particular at high school students: the questionnaire and its free result remain non-identifying, and only the email address entered during a payment is linked to the purchased profile.
10. Contact
For any question regarding this policy or your data: contact@syntropic-studio.fr. No Data Protection Officer (DPO) has been appointed, as this is not mandatory; the address above is the point of contact for any request.
11. Amendment
This policy may be updated. The applicable version is the one published on the Site on the date of your consultation.